mariadb: save_window_function_values triggers an abort during IN subquery

savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a subquery...

GSD-2022-1000539 scsi: pm8001: Fix use-after-free for aborted TMF sas_task

scsi: pm8001: Fix use-after-free for aborted TMF sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000538 scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task

scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000452 scsi: pm8001: Fix use-after-free for aborted TMF sas_task

scsi: pm8001: Fix use-after-free for aborted TMF sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.25 by commit...

GSD-2022-1000391 scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task

scsi: pm8001: Fix use-after-free for aborted SSP/STP sastask This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

Scan Aborted After Being Logged Out

This plugin is raised when the scanner has been logged out and has not been able to authenticate back against the web application using the options provided in the scan policy. This may be due to some links accessed by the scanner during the scan that could have invalidated the session used by th...

shopify-scripts: SIGABRT in mrb_debug_info_append_file

PoC ------------------- The following code triggers the bug attached as testmrbdebuginfoappendfile.rb: i""do"".+end mirb ------------------- x@x:/Desktop/test/mruby/bin$ ./mirb testmrbdebuginfoappendfile.rb mirb - Embeddable Interactive Ruby Shell mirb: /home/x/Desktop/test/mruby/src/debug.c:136:...

Restoration of HA Backups on Standalone NetScaler MAS Fails at Restoring of the Database

The restoration of the NetScaler MAS backup fails at restoring of the Database as shown in the following screen shot: This will stay at this point and will not continue. Checking process using top or ps commands will show low CPU usage, which indicates that the restore process has stopped. The...

Wireshark 1.12.0 < 1.12.12 / 2.0.0 < 2.0.4 - RLC Dissector Denial of Service

Sample PCAP Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or...

Wireshark 1.12.0 1.12.12 2.0.0 2.0.4 - RLC Dissector Denial of Service

Wireshark 1.12.0 1.12.12 2.0.0 2.0.4 - RLC Dissector Denial of Service Sample PCAP Build Information: TShark Wireshark 2.0.2 SVN Rev Unknown from unknown Copyright 1998-2016 Gerald Combs and contributors. License GPLv2+: GNU GPL version 2 or later This is free software; see the source for copying...

Wireshark - alloc_address_wmem Assertion Failure

Wireshark - allocaddresswmem Assertion Failure Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=804 The following crash due to an asserion failure can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr...

CVE-2014-0230

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption via a series of aborted uploa...

UBUNTU-CVE-2014-0230

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service thread consumption via a series of aborted uploa...

OpenSSH memory leak

Memory leak on aborted client connection...

kvm security and bug fix update

kvm-83-105.0.1.el54.13 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.13 - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch bz541164 - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z kvm-83-105.el54.12 -...

dTunes 2.72 (Filename Processing) Local Format String PoC

Exploit for unknown platform in category dos / poc ========================================================= dTunes 2.72 Filename Processing Local Format String PoC ========================================================= !/usr/bin/perl dTunes 2.72 local format string PoC filename processing...

Avahi < 0.6.24 (mDNS Daemon) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ============================================================= Avahi http://jon.oberheide.org Usage: gcc cve-2008-5081.c -ldnet -o cve-2008-5081 ./cve-2008-5081 1.2.3.4 Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5081...

Ubuntu 4.10 / 5.04 : squid vulnerabilities (USN-183-1)

A Denial of Service vulnerability was discovered in the handling of aborted requests. A remote attacker could exploit this to crash Squid by sending specially crafted requests. CAN-2005-2794 Alex Masterov discovered a Denial of Service vulnerability in the sslConnectTimeout function. By sending...

security flaw

Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...

DEBIAN-CVE-2005-2970

Memory leak in the worker MPM worker.c for Apache 2, in certain circumstances, allows remote attackers to cause a denial of service memory consumption via aborted connections, which prevents the memory for the transaction pool from being reused for other connections...